This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: C+LxwaLPK3nlAvpn3kPhi5GobjfUt3o85sNoeaTjRHo= Subject key identifier: 6B:C7:D5:45:3C:33:65:0C:7F:E8:7D:45:23:FA:03:48:EF:9A:E2:77 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 121E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 11EE Signing time: Sat 06 Dec 2025 16:42:42 +0000 Manifest this update: Sat 06 Dec 2025 16:42:41 +0000 Manifest next update: Sat 13 Dec 2025 16:42:41 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: 0J4rzr/a1W61uK6el7Asc9bS7bsGTiJ9i/fz+4jMrlI=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: 1Dte1jitl8LnOYOoLvG0ce2OItlY4tphV2pGfVGqSvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4638 (0x121e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Dec 6 16:42:41 2025 GMT Not After : Dec 13 16:42:41 2025 GMT Subject: CN=69345d01-6532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:f1:db:39:83:fb:c3:7b:6d:ac:1f:f6:49: 47:f6:6c:15:75:ae:99:17:16:a3:9e:a4:0d:f8:39: 84:6a:a8:4d:17:a0:eb:1a:32:cf:9d:6d:54:3e:a4: 6d:1f:db:6c:eb:45:fa:c5:62:01:22:cb:ae:70:b2: ae:cc:2d:cb:f5:a4:d8:b1:25:97:04:ee:71:cd:3c: c5:b4:8c:92:8c:33:ba:28:e9:16:cf:60:a1:32:e5: 3f:53:d1:9c:77:d1:74:33:8e:a6:71:59:e1:e2:2a: d4:fd:be:79:38:cd:61:92:7e:c8:cc:31:9b:1f:69: e9:92:e9:39:02:90:6c:b8:d3:3e:37:35:2c:b4:c7: a4:ba:0d:c3:eb:e7:14:76:13:4b:7d:b2:2a:ea:52: a1:8b:28:94:3b:4c:a8:be:32:82:43:6c:bd:21:79: 93:51:32:a4:65:e6:31:07:ff:16:ea:5a:5e:cd:78: bd:61:3a:c4:cb:d6:23:cd:44:ff:8f:ed:a8:df:9c: f9:8b:7c:2e:f2:5b:fc:3e:cd:08:ed:d0:de:c2:50: 3c:db:cc:5a:05:83:21:6d:b5:a0:2f:3c:08:46:81: 9d:bf:29:6d:94:23:85:32:a7:72:59:e5:37:6b:08: bc:86:90:ae:6f:cc:81:a4:9c:7a:c6:01:a0:46:57: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:D5:45:3C:33:65:0C:7F:E8:7D:45:23:FA:03:48:EF:9A:E2:77 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a3:cf:c6:cb:9a:c8:b7:eb:7f:49:81:b6:88:e8:aa:19:d6: f0:74:92:cb:69:3d:29:be:74:48:25:39:7a:a5:ea:8e:e4:59: 5e:af:ec:b1:de:f6:d9:1f:be:17:ae:c2:6b:47:90:e5:27:4d: ef:aa:db:04:f9:5f:4f:0a:09:df:02:f7:d5:b3:d0:92:37:9a: 87:1b:a5:83:b7:87:db:e9:e2:27:f4:07:72:54:0c:85:09:1d: 72:50:4a:ab:a6:b9:61:c4:ba:85:3c:7f:37:90:57:ec:6f:22: 82:67:22:4a:bd:11:21:03:d4:a1:f8:c3:6e:81:71:43:ae:0e: 92:fe:3d:40:06:17:2f:1c:63:d1:07:2c:b7:92:c2:8b:f8:a2: 5b:a7:90:82:f0:a0:da:ae:cf:fa:7a:66:7b:c7:5e:da:15:e4: dc:b6:d6:11:e3:ab:44:f6:87:c3:8a:dd:aa:74:c1:33:05:a9: bf:46:53:3d:d0:45:4d:fa:86:f5:6f:1f:4f:85:17:a6:5a:36: 1c:2c:d3:e6:88:0f:4f:b7:ca:c2:3d:8a:1e:f6:ba:82:19:0f: 9b:16:09:b3:73:40:e0:f1:b4:1f:31:b4:f3:68:d8:be:c6:3f: 3a:e7:af:27:5a:aa:e0:9e:75:50:cd:2b:7c:eb:f8:d3:53:14: 44:f8:39:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjUxMjA2MTY0MjQxWhcNMjUxMjEzMTY0MjQxWjAYMRYwFAYD VQQDEw02OTM0NWQwMS02NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoDx2zmD+8N7bawf9klH9mwVda6ZFxajnqQN+DmEaqhNF6DrGjLPnW1UPqRt H9ts60X6xWIBIsuucLKuzC3L9aTYsSWXBO5xzTzFtIySjDO6KOkWz2ChMuU/U9Gc d9F0M46mcVnh4irU/b55OM1hkn7IzDGbH2npkuk5ApBsuNM+NzUstMekug3D6+cU dhNLfbIq6lKhiyiUO0yovjKCQ2y9IXmTUTKkZeYxB/8W6lpezXi9YTrEy9YjzUT/ j+2o35z5i3wu8lv8Ps0I7dDewlA828xaBYMhbbWgLzwIRoGdvyltlCOFMqdyWeU3 awi8hpCub8yBpJx6xgGgRlfHKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvH1UU8 M2UMf+h9RSP6A0jvmuJ3MB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpo8/Gy5rIt+t/SYG2iOiqGdbwdJLLaT0pvnRIJTl6peqO5Fler+yx 3vbZH74XrsJrR5DlJ03vqtsE+V9PCgnfAvfVs9CSN5qHG6WDt4fb6eIn9AdyVAyF CR1yUEqrprlhxLqFPH83kFfsbyKCZyJKvREhA9Sh+MNugXFDrg6S/j1ABhcvHGPR Byy3ksKL+KJbp5CC8KDars/6emZ7x17aFeTcttYR46tE9ofDit2qdMEzBam/RlM9 0EVN+ob1bx9PhRemWjYcLNPmiA9Pt8rCPYoe9rqCGQ+bFgmzc0Dg8bQfMbTzaNi+ xj86568nWqrgnnVQzSt86/jTUxRE+DnO -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:41 2025 by rpki-client